Une approche à base de modèles synergiques pour la prise en compte simultanée de l'utilisabilité, la fiabilité et l'opérabilité des systèmes interactifs critiques

Dans le cadre de la conception et du développement de systèmes interactifs critiques, lorsque le coût d'une erreur potentielle d'utilisation ou d'un dysfonctionnement du système peut dépasser le coût de développement de ce système ou se chiffrer en pertes humaines, les techniques, méthodes et processus actuellement proposés dans le domaine de l'IHM sont difficilement exploitables. D'une part, ils ne permettent pas de garantir simultanément les propriétés d'utilisabilité et de sûreté du système développé. D'autre part, la formation et la qualification des utilisateurs du système avant sa mise en opération n'est pas envisagée. Enfin, ces techniques, méthodes et processus ne fournissent pas les moyens de traçabilité exigés pour le développement de systèmes critiques. L'argumentaire de cette thèse s'appuie sur les avantages et limitations des approches existantes en termes de processus et notations de modélisation. Nous proposons une approche et montrons sa réalisation à travers un processus de développement d'un système interactif critique et de son programme de formation associé. Ce processus fournit un cadre conceptuel, une association d'étapes, des notations, et un environnement logiciel pour : le développement d'un système utilisable et sûr, le développement du programme de formation associé ainsi que la traçabilité des exigences et des choix de conception tout au long des différentes étapes. Il utilise certains principes de la conception centrée utilisateur et exploite de manière synergique les modèles des tâches, les modèles formels du comportement du système et le modèle de développement du programme de formation.In the field of interactive critical systems, the cost of a usage error or of a system failure can overcome the cost of the development of the system itself, and can result in loss of life, injury or damage to the system and its environment. Then, currently available Human Computer Interaction techniques, methods and processes are not sufficient, as they are not handling all of the design and development issues that are associated to interactive critical systems. First of all, these techniques, methods and processes do not enable to guarantee that the system will fulfil both usability and reliability properties. Then, they do not consider training and qualification of the users of the system. At last, they do not provide means for traceability of the needs and requirements through the whole development process. We propose an approach to develop interactive critical systems that are usable, reliable and operable and we describe the associated conceptual framework of our approach. We propose an implementation of this approach with a development process, notations and a software environment. The development process integrates phases for the development of the associated training program, and it provides support for the traceability of requirements and design choices during the whole phases of the process. This approach takes advantages from the User Centered Design paradigm and uses, in a synergistic way, task models, system's behaviour formal models and training program development model

V&V of Lexical, Syntactic and Semantic Properties for Interactive Systems Through Model Checking of Formal Description of Dialog

International audienceDuring early phases of the development of an interactive system, future system properties are identified (through interaction with end users in the brainstorming and prototyping phase of the application, or by other stakeholders) imposing requirements on the final system. They can be specific to the application under development or generic to all applications such as usability principles. Instances of specific properties include visibility of the aircraft altitude, speed… in the cockpit and the continuous possibility of disengaging the autopilot in whatever state the aircraft is. Instances of generic properties include availability of undo (for undoable functions) and availability of a progression bar for functions lasting more than four seconds. While behavioral models of interactive systems using formal description techniques provide complete and unambiguous descriptions of states and state changes, it does not provide explicit representation of the absence or presence of properties. Assessing that the system that has been built is the right system remains a challenge usually met through extensive use and acceptance tests. By the explicit representation of properties and the availability of tools to support checking these properties, it becomes possible to provide developers with means for systematic exploration of the behavioral models and assessment of the presence or absence of these properties. This paper proposes the synergistic use two tools for checking both generic and specific properties of interactive applications: Petshop and Java PathFinder. Petshop is dedicated to the description of interactive system behavior. Java PathFinder is dedicated to the runtime verification of Java applications and as an extension dedicated to User Interfaces. This approach is exemplified on a safety critical application in the area of interactive cockpits for large civil aircrafts

From Aircrafts Interactive Cockpits to Autonomous Vehicles: Are Design Principles Transferable ?

International audienceThis position paper identifies two design automation principles and discuss their applicability to the field of autonomous vehicles. The first one concerns the levels of automation while the second one focusses on the notion of allocation of tasks and functions between operators and automation. We believe that experiences in such design aspects together with dependability aspects (including operations under automation degradations) might benefit to the workshop. Our objective in attending the workshop is to bring our knowledge from the domain of safety critical interactive systems to the workshop. Beyond that we would like to assess the potential transferability of current knowledge in autonomous ground vehicles to these systems

Explicit representation of function allocation and authority sharing (initiative and responsibility) (CHI 2018 Workshop - Interacting with Autonomous Vehicles: Learning from other Domains, Montréal, Canada, 22/04/2018-22/04/2018)

International audienceAutomation can have a huge impact on the over all performance of the couple operator/system. Function allocation and authority sharing are key elements of the design of automation ; there is thus a critical need for methods and tools to support the design and assessment of these elements while developing autonomous systems. In this position paper, we discuss the benefits of embedding those concepts as first class citizens ina notationand its associated method building on earlier work on operators’ tasks descriptions and system behavior modelin

Modeling and Analysis of Human Error Based on Tasks Descriptions: Connecting Research Knowledge with Practice (Human Dependability Workshop (HUDEP 2015)

International audienc

A Multi-Models Based Development Process for Critical Interactive Systems Integrating Formal and Informal Approaches

International audienc

Predicting and Mitigating Human Error Through Detailed Descriptions of Operators' Tasks

International audienc

Contextual Help for Supporting Critical Systems' Operators: Application to Space Ground Segments

International audienc

Safety-Critical Automation : Aircrafts, Autonomous Vehicles, Air Traffic Management and Satellite Ground Segments Perspectives (HUDEP 2017)

HUDEPInternational audienc

Une approche à base de modèles synergiques pour la prise en compte simultanée de l'utilisabilité, la fiabilité et l'opérabilité des systèmes interactifs critiques

TOULOUSE3-BU Sciences (315552104) / SudocSudocFranceF